Skip to main content
A Trust Profile is your organization’s repository of security documentation inside VISO TRUST. It serves two purposes. First, it feeds Artifact Intelligence with your own artifacts to answer inbound customer questionnaires automatically. Second, it provides the source material for Vendor Discovery, surfacing vendors referenced in your documents. Navigate to Trust Center → Knowledge base to manage your Trust Profile. VISO TRUST enables Trust Center per organization.

​
What the Trust Profile is for

When your organization is a vendor being assessed by a VISO TRUST customer, the assessment process typically involves submitting documentation through a collection request. The Trust Profile eliminates the need to respond manually to every request. Artifact Intelligence analyzes documents uploaded to your Trust Profile and makes them available to:
  • Automatically answer questionnaires — when a customer uses VISO Chat Agent to ask questions about your security program, the AI draws on your Trust Profile artifacts to generate answers
  • Pre-populate assessments — when a customer assesses your organization, your Trust Profile documents can reduce the number of additional artifacts they need to request
  • Power Vendor Discovery — VISO TRUST analyzes your artifacts to identify subservicers and vendors referenced in your documents, surfacing them in your Vendor Discovery feed
Private artifacts in your Knowledge base aren’t shared outside your organization. VISO TRUST uses them inside your instance to answer questions and power discovery. Only artifacts you make public are accessible to customers assessing you. See Artifact visibility.

​
Adding artifacts to your Trust Profile

1

Go to Trust Center → Knowledge base

This is your Trust Profile management page. To add artifacts straight into a folder, select the folder first.
2

Click Upload artifact

Upload files by dragging and dropping, opening a file browser, or submitting a webpage URL.Accepted inputs include:
  • Security documents (SOC 2 reports, ISO 27001 certificates, penetration test reports)
  • Compliance documents (DPAs, privacy policies, sub-processor disclosures)
  • Policies and procedures
  • Security overview pages (via URL)
  • Any other documentation describing your security program
3

Wait for analysis

Artifact Intelligence processes each document automatically. The artifact’s Status updates in the table as processing runs. Once an artifact is Complete, it’s indexed and available for VISO Chat Agent, questionnaire answering, and vendor discovery.

​
Finding artifacts

The Knowledge base table lists each artifact’s type, name, status, assurance level, expiration date, and folder. The table updates as artifacts finish processing, so you don’t need to refresh.
  • Search artifacts by name.
  • Filter by Type, Validity (Expired or Expiring soon), Status, or Visibility (Public or Private). Click Clear all to reset filters.
  • Click a column header to sort.
A lock icon marks a private artifact and a globe icon marks a public one. An eye-off icon marks an excluded artifact. Hover over it to see the exclusion reason.

​
Organizing artifacts with folders

Folders group related artifacts, such as the evidence for one product or region. You can also scope a questionnaire to specific folders so Artifact Intelligence answers only from those artifacts. See Answer Inbound Questionnaires.
  • Create a folder: click New folder in the left panel, enter a Folder name and an optional Description, then click Create.
  • Move artifacts: drag an artifact row onto a folder in the left panel, or open the row’s actions menu and select Move to folder. To move several at once, select their checkboxes and click Move to folder. Select No folder or Unassigned to take an artifact out of its folder.
  • Reorder folders: drag folders up or down in the left panel.
  • Edit or delete a folder: select the folder, open the actions menu next to Upload artifact, and select Edit folder or Delete folder. Deleting a folder keeps its artifacts in your Knowledge base without a folder.
Select All artifacts to see every artifact regardless of folder. An artifact belongs to at most one folder.

​
Managing artifacts

Open an artifact row’s actions menu to manage it:
  • Make public or Make private: change who can access the artifact. See Artifact visibility.
  • Exclude artifact or Include artifact: remove an artifact from questionnaire answering, or add it back. See Excluding artifacts.
  • Delete artifact: permanently remove the artifact. To delete several at once, select their checkboxes and click Delete.
To download artifacts, open the actions menu next to Upload artifact and select Download artifacts. Inside a folder, the download includes only that folder’s artifacts.

​
Artifact visibility

  • Private artifacts are accessible to everyone in your organization and aren’t shared with other organizations.
  • Public artifacts are accessible to users outside your organization who create a relationship with your company on VISO TRUST.
Make an artifact public when you want customers assessing you to reuse it without requesting it again.

​
Excluding artifacts

An excluded artifact stays in your Knowledge base but Artifact Intelligence no longer uses it to answer questionnaires. Exclude an artifact when it’s outdated, duplicated, or irrelevant but you want to keep it on file. VISO TRUST also excludes an artifact automatically when a newer artifact of the same audit type supersedes it. You can’t re-include a superseded artifact.

​
Who can manage the Knowledge base

​
Keeping your Trust Profile current

The value of your Trust Profile depends on how current your documentation is. Outdated artifacts reduce the quality of AI-generated answers and may give customers an inaccurate picture of your security posture. Recommendations:
  • Upload new SOC 2 or ISO 27001 reports as soon as they’re issued
  • Update your sub-processor list whenever it changes
  • Remove, replace, or exclude expired artifacts so outdated documents don’t generate misleading answers. Filter by Validity to find them.
  • Include your security and privacy pages via URL so VISO TRUST can monitor them for changes

​
Trust Profile and VISO Chat Agent

When a VISO TRUST customer uses VISO Chat Agent to ask questions about a vendor, the AI searches the vendor’s Trust Profile (if one exists) alongside other available evidence. A complete Trust Profile means more accurate, specific answers and fewer follow-up requests sent to your security team.

​
Trust Profile vs. assessment artifacts

Assessment artifacts collected from a vendor are scoped to that specific relationship and assessment. Trust Profile artifacts are organization-wide and power AI capabilities across your program.